March 9, 2026
Pantheon has released version 2.3.1 of the WP SAML Auth WordPress plugin. This update adds a new filter for multisite environments to give developers more control over how SAML-provisioned users are added to sites. No action is required — existing behavior is unchanged.
What's new
- Multisite user provisioning control — A new
wp_saml_auth_auto_add_to_blogfilter allows developers to prevent auto-provisioned SAML users from being automatically added to the current site. When set tofalse, users are created as network-level users without a role on any specific site, giving full control over site membership. The filter defaults totrue, preserving existing behavior. See #465 for details.
Information:
Developer note
If you use the new wp_saml_auth_auto_add_to_blog filter and return false, the user passed to the wp_saml_auth_new_user_authenticated action will have no role on the current site. Any hooks relying on $user->roles being non-empty should account for this.
Update to 2.3.1 from the WordPress dashboard under Plugins > Installed Plugins, or download it from the WordPress Plugin Repository.
For more details, see the plugin changelog.